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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address ~ 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under ttie provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply vvithln the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply vwll, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)0 Responsive to comnnunication(s) filed on . 

2a)n This action is FINAL. 2b)[3 This action is non-final. 

3) 0 Since this application is In condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) 13 Claim(s) 1-20 \s/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) 13 Claim(s) 1-20 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)\Z\ objected to by the Examiner 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

11) 0 The proposed drawing correction filed on is: a)n approved b)D disapproved by the Examiner 

If approved, corrected drawings are required in reply to this Office action. 

12) n The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

13) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (0- 

a)nAII b)n Some*c)n None of: 

1 .D Certified copies of the priority 'documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) n Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) D The translation of the foreign language provisional application has been received. 

15) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 . 
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2) n Notice of Draflsperson's Patent Drawing Review (PTO-948) 5) d Notice of Informal Patent Application (PTO-1 52) 
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DETAILED ACTION 

1 . Claims 1-20 were pending for examination 

2. Claims 1-20 are rejected. 

Claim Rejections - 35 USC §103 

3. Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Auerbach 
et al, U.S. Pat. No. 5,673,316 issued Sep. 30, 1997 and fiirther in view of Downs et al, US 
Pat. No. 6,226,61 Sfiled on August 1998(issued May 2001). 

4. As per claim 1, Auerbach is directed to a method and apparatus to create, distribute, 
sell and control access to digital contents using secure cryptographic envelope, see abstract. 

Auerbach discloses steps of a cryptographic envelope process where the main entities 
involved in the process are the Document Server (i.e. a content server), the Buy Server (i.e. 
an access server), the description fingerprinting and watermarking module (DFWM), and 
user personal computer (UPC), see col. 2, lines 42-49. 

Auerbach 's creation of a cryptographic envelope of digital content is done off-line by 
the document provider (i.e. a content server) and can be distributed or stored on any servers 
without any security requirement on the server, col. 3, lines 44-48, see also col. 6, lines 40-42. 

Auerbach 's cryptographic envelope is a grouping of information parts. Information 
parts are of two types: document and control parts. Document parts are the "contents" and 
control parts the metadata needed to support the functions such as authentication and 
confidentiality of a cryptographic envelope, col. 4, lines 3-5 and lines 25-35, see also Fig. 2, 
reference numbers 201-21 1 for elements of a cryptographic envelope. 
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Once information parts to be included in the cryptographic envelope are assembled, 
each document part is encrypted with its part encryption key (PEK) to form encrypted part, 
which is included in the cryptographic envelope, col. 5, lines 57-67. 

Then the PEKs are encrypted using public key a Buy Server (i.e. an access server) 
and are included in the cryptographic envelope, see col. 6, lines 1-5. Other elements such as 
abstracts, table of content, terms and conditions and a list of information parts are also 
included in cryptographic envelope. That is, the cryptographic envelope is self-contained and 
unexecutable and can be used as a basis for designing and implementing distributed access 
control of digital documents, see col. 2, lines 3-10. 

Auerbach further teaches that the digital contents through cryptographic envelopes 
are distributed by any means including over the Internet, see col. 6, lines 30-42. That is, The 
Document Server (DS), the Buy Server (BS) and the client process (UPC) are coupled to a 
network. 

Auerbach further teaches that a user (i.e. a client coupled to the network) interested in 
the cryptographic envelope content, browses the plain text portion of the envelope (i.e. a 
"teaser") and would have to buy (or obtain) the necessary PEKs (i.e. content encryption keys 
necessary to obtain the digital content(s)) from the buy server (i.e. an access server) prior to 
obtaining the digital content from the content server, col. 6, lines 43-48, see also Fig 1. 

Auerbach does not explicitly teach obtaining the location identifier of the title from 
the buy server. 

However, Downs discloses a Secure Digital content Electronic Distribution which 
includes Content Provider, Electronic Digital Content Store, Intermediate Market partners. 
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Clearinghouse, Content Hosting Site, Transaction Infrastructure, and End-User Device, col. 
8, lines 54-67. Secure Digital content Electronic Distribution enables the secure delivery of 
high-quality, electronic copies of content to End-User Device and to regulate and track usage 
of the content, see col. 12, lines 7-11. 

Downs further teaches that licensing authorization and control are implemented 
through the use of a Clearinghouse(s) entity and Secure Container (SC) technology. The 
Clearinghouse(s) provides licensing authorization by enabling intermediate or End-User(s) to 
unlock content after verification of a successfial completion of a licensing transaction. Secure 
Containers (SC) are used to distribute encrypted content and information among the system 
components, col. 7, lines 12-18. 

Downs further discloses metadata secure containers that are built by content provider 
and includes an external URL (Uniform Resource Locators or location identifier) to point to 
the content, 26, lines 41-42 

It would have been obvious to one of ordinary skill in the art to modify the digital 
container of Auerbach to that of Downs to include a URL (i.e. a location identifier) because 
the size of the content is typically too large to efficiently download the containers just for the 
purpose of accessing the descriptive metadata. Instead, the external URL (Uniform Resource 
Locators) to point to the content, col. 26, lines 35-40. 

5. As per claims 2, Auerbach teaches this. Through the Graphical User Interface, the 
user is prompted with a list of articles (i.e. contents) contained in the cryptographic envelope. 
After browsing the relevant articles, the user would initiates a buy request message (BRM) 
and would send it to the Buy Server (i.e. access server), col. 8, lines 7-14. 
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The Buy Server then prepares a buy server response (BSR) in the form of a "License 
Cryptographic Envelope" or "key" to unlock the cryptographic envelope and sends it back to 
the user. Auerbach further teaches that standard cryptographic techniques such as encryption 
and authentication can be applied to protect the piracy and authenticity of a BSR. col. 10, 
lines 35-50. That is the user would be require to obtain a signature of the buy server to open 
the cryptographic envelope provided by the content server. 

6. As per claim 3, Auerbach teaches that the information parts of the cryptographic 
envelope are of two types: document and control. The control parts are the meta-data needed 
to support and process the cryptographic envelope. Examples of the control parts are price 
matrix describing the pricing structure of the purchase of the content such as volume 
discount, discount for club membership. Auerbach further teaches that the price discount may 
be time dependent. That is, the terms and conditions on the purchase and use of the digital 
content are also included in the cryptographic envelope and is evaluated by the buy server, 
see col. 4, lines 9-64. 

7. Referring to claims 4 and 5, Downs's secure content (SC) includes at least one bill of 
material part which includes information such as SC version, expiration date of SC, ID, etc., 
see col. 25, lines 7-35. Down further implements "Rights Management" functions into secure 
container which includes licensing authorization enforcing usage conditions of purchase or 
license, such as permitted number of copes, number of plays, and the time interval or the 
term license may be valid, see column 6, lines 65-67 though col. 7, lines 1-19. 

The examiner asserts that obtaining a new time data from the content provider or 
retailers would been an obvious variation of the cryptographic envelope (or secure container) 
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of Auerbach to extend or renew the license terms under control of the access server (or 
clearinghouse) after the secure container's time period expires. 

8. Apparatus claims 6-9, 11-19 corresponds to method claims 1-5 and are rejected for 
the same reasons provided in the rejection of claims 1-5. 

9. Referring to claims 10 and 20, Auerbach discloses that once a cryptographic envelope 
is created, it can be distributed by any means, e.g. sending over Internet, by radio, or 
television signals, by cable, by satellite, by CD-ROM, and by BBS, col. 1, lines 54-65, see 
also Downs, col. 11, lines 55-61. 



10. Any inquiry concerning this communication or earlier communications from 
examiner should be directed to Taghi Arani, whose telephone number is (703) 305-4274. The 
examiner can normally be reached Monday through Friday from 7:30 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gail Hayes, can be reached at (703) 305-9711. The Fax numbers for the 
organization where this application is assigned are: 
After-final (703)746-7238 
Official (703)746-7239 
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